Warning: Permanently added '[localhost]:57438' (ECDSA) to the list of known hosts.
2025/01/21 03:29:30 fuzzer started
2025/01/21 03:29:30 dialing manager at localhost:44833
syzkaller login: [ 62.025120] cgroup: Unknown subsys name 'net'
[ 62.121009] cgroup: Unknown subsys name 'cpuset'
[ 62.154521] cgroup: Unknown subsys name 'rlimit'
[ 66.619583] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/21 03:29:47 syscalls: 202
2025/01/21 03:29:47 code coverage: enabled
2025/01/21 03:29:47 comparison tracing: enabled
2025/01/21 03:29:47 extra coverage: enabled
2025/01/21 03:29:47 setuid sandbox: enabled
2025/01/21 03:29:47 namespace sandbox: enabled
2025/01/21 03:29:47 Android sandbox: enabled
2025/01/21 03:29:47 fault injection: enabled
2025/01/21 03:29:47 leak checking: enabled
2025/01/21 03:29:47 net packet injection: enabled
2025/01/21 03:29:47 net device setup: enabled
2025/01/21 03:29:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/21 03:29:47 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/21 03:29:47 USB emulation: enabled
2025/01/21 03:29:47 hci packet injection: enabled
2025/01/21 03:29:47 wifi device emulation: enabled
2025/01/21 03:29:47 802.15.4 emulation: enabled
2025/01/21 03:29:47 fetching corpus: 0, signal 0/0 (executing program)
2025/01/21 03:29:49 starting 8 fuzzer processes
03:29:49 executing program 0:
r0 = timerfd_create(0x9, 0x180000)
timerfd_gettime(r0, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000040)={0x1, 0x6, 0x1, 'queue0\x00', 0x2})
r1 = timerfd_create(0x6, 0x800)
timerfd_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000180)={{0x4, 0x74}, {0x6, 0x5b}, 0x7, 0x7, 0x76})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x153900)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000240)={{0x3, 0x10}, {0x8, 0x40}, 0x3, 0x5, 0xbf})
msgrcv(0xffffffffffffffff, &(0x7f00000002c0)={0x0, ""/169}, 0xb1, 0x1, 0x800)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x40, 0x80a0, 0x5, 0x8, {{0x44, 0x4, 0x3, 0x0, 0x110, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x2b, 0x9e, [@rand_addr=0x64010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x54, 0xf9, 0x1, 0x7, [{@multicast1, 0x96c}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010101, 0x7}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xc18}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x18}, {@rand_addr=0x64010101, 0x6}, {@local, 0x5}]}, @noop, @lsrr={0x83, 0x27, 0x83, [@broadcast, @multicast1, @multicast1, @empty, @multicast1, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @ssrr={0x89, 0x23, 0x47, [@broadcast, @multicast2, @multicast2, @remote, @broadcast, @multicast2, @multicast1, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0x36, 0x1, 0x8, [{@local, 0x9}, {@empty, 0x8}, {@remote, 0x1000}, {@rand_addr=0x64010102}]}, @timestamp={0x44, 0xc, 0x9e, 0x0, 0x6, [0x0, 0x80]}]}}}}})
socket$nl_route(0x10, 0x3, 0x0)
timerfd_gettime(r0, &(0x7f0000000500))
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f0000000580)='system_u:object_r:selinux_config_t:s0\x00', 0x26)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x800)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000600)={0x401, 0xffffff80, 0x0, 'queue0\x00', 0x7})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f00000006c0))
timerfd_gettime(r1, &(0x7f0000000700))
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000740))
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd768}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x2c}}, 0x4000000)
03:29:49 executing program 1:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x16}, @val={0x3, 0x0, 0x5, 0x200, 0x8001, 0x1}, @llc={@llc={0x1, 0xfc, "8eb0", "41651c87692a547b3d9763f3fe6a90bee768ff6298d37fa4389453f7a92452937bad031b38a1be39798f470ba03dc07ef918fd775ee36fcf27e57923faeb4a6c60fe42a00fe2936a7da951235f9c899c4c4f85cdae2757f2f6f95333c85c43f60f9e5453857395904dcfdcbb72a012856c727a98742cd0d0ed263c4e3393a03229686b6b8d28168b3bb932542b99f5a77f44feb16979dcb6f238570f28dd1dd02d66b105a8cc4d0a299dcb2b70aa50abc321b8c368f572df240a82578ab19658fd0e8eb707b13d32cfd3bb4447bb43bdec498a1bc1f92bd4853a5e3715642e4ec43b8ebc48ec2335d2c54767d6cfba32385ae8ef5aa0b78a95ea0565cf2f0e9b5fe7a2e18c4933fc77f53d4564423703cd327966d92fe95e35e7f4a078fbea49dc4ac074e8db0a5a422b07c23b1943c38c165139eb511f6e6b1850552e3728a6f38c6bfaa61c4b832c0b29b4121204cebbf0bf992c8a17f1d69c92257f4a4456f0af424248274ce7018602749c852e2e3af7ec762ab1ff6e43215ea7b0ebecca0f409ba18569a0adc3eb4587361519c17dfa8fd765b02655cb2755984bb8d021a22fe488b059be74aac003ace6e7c88dd5ec08a31206f9624d43ddbe9a05b369aefc10f68363f88a3ac9677b5866dcd2d9cb37e9285b900e61b6e9120ddf1dee13e299a3d600f62dc14776b56bac8189ee397d40b9d0c78d8c164afc656e1abae88ceda2ebfc21f2a45098b876f7df2f59d932a180ee14803e401e58897247d61d4100f75138e4c11e9b8834f1e054e51dd5cc04c38726aab44241618eb461d2a98603d3d320802ee54115e0fa05f3172795bdb055b36d5da46f46b865caa24533d87728c380055588399091900f082bbeef12da15c8cc847c557eab99ee18a9dc3e122417e8ea78fe8b2cfee4716ae5e20db7f985f438c7923d0f3f73818179bfbf9a9fb9f91aa4ff1c4bb534d4541c7027fd92af074cb56dfdf4cb092aded82c2a408d17a79747312afe505fad8a20dc299484235433e5b176179b0ef898053b4537c4113ee6cbc7940b15ab03869d321194021cb3b6e96519569e93887cafefa03f250d06daf02a5842baa7b61adddba04f55975ddb45fd26a7236a0c4fdd3ee7903a53bd21e354f9846513cd2f3420a85dc2f07c0d6afc7dd29d981f2e1920ac9115f0e6bcf96ffba9183148e69a2c92755e738aab1618eaa6e40f09a053feca7749f988afe453e2b5abfa9ccd7078ad3e5157adde3b3c7dda088c7a58e5757e64fbb620220faf8317b9c5dcb1a5c02d78fe76365755904ee05b350d175d724e075d16d07865d2bcf22252784f3d6a7e59c629d0eaf0419142caff792a45ccb36946bafbef4d3b70729050375818cf18a06b3f1615da688fd1af3c4b779a6078ca1aeec301f7d1f6fe4eb028b916ffcb1d9c743794b2f31d2d57cd7c2429cd179a445cdb2761a968c53d865c16519cf844512b066927330716ddbf5b1fc9d9ec97d2b990e8150e64a2008947df29a975d0b895e3cb839a3e0b914531bc4317b94b33c2e7a9cfb173323e491aa91d529eed4be5b873480fb9f80e874b02cf261a34605b947d5067b1a31cdcef39f92c316cf7380d09ed24723a3e1d4273ebb179a4908a3c6ffdd6c4b2cbe8e06076ba41832782ddcad751f1e5a56d26af5b2cc4004b1ff7653d97a52fdb6028243ff32ffe5c10832e1dd5197457ecf4be8215e2a71d472f25732ad122d2da08a4e935df8d7e0e87806ba3b91b0b7e69e13457e23db754298e1365958eb621a6305aa71771500f268b9434e03672cf32a279d69a6ad6958fdc93ce3ed2622b22999450cbaa4a4ca890955f9d34ce676534427bdd855bf8c34d9a523258758a497bfcf26e71ba26ec76998c2600b1f8224c1b6fe039e1f77cae9217a653b795ccceef55abbc68e779d00fe80812c5c7c6ca98bd92c3fa52c0a89ea15274a0c4a228de6f7570ccbe37da7a760fd40e292ccd77e0bd6bbfb55af15de6a9d84e0c4d7793930f3b950d97a66c7aa9614beb17fa81234c56740e3ed639d3fa0a16ed54c0dbeea12374d5ca0e7e283d8a3ee4007b23096a79f8e5c06782ff8ac46ff3b96436305433ffca266a62f004daaf4d32ed1a6899da449e31962fefba73e1e7300fa262cfe0b4eeab7f1e6246f0c3c43803a2a8af758820878c5e50270288ea1f6f0cf7306093a680801d241109d2db56676547b91164453bf6cc05d12d8506bf7d045b1b48c5710d9db62a23e294c102e4dc74bd885f7e28e4478f8b74b0d9b2394ce68c7dae198b2ea1b045fd2133b9f59b06eff018430fdb7978ad459922dd18669002e3ef01bbe8dba6b72f33fbe46b01ca0748295ca64de9de180f5e55095576edb17500a280dd8b9cf23b1d7fc8908e4ddf43fe7cb76658dfade7ab6694354d1f11973c2c8287e6f3cb089261f024e6f622027e09521a752fcb5a672e1df9a8557662b206eead8cf43ac9e2b267a416b0d4e4bd3b3a234026a2d0c28faea9a85bebc15d216909e821d460e107968b3b66631affab53e817c4912150ece977f6d2a70c860b4fa56177c57eee7da8a285ee9f4da8c2ccf3aaef47e4e3da80409c45d5381fecc5a6998521dcacefe7f4d5e698d39dee0021034bb8d9033af15d8bf4e60d978509bc1928c6fd44e37b2b0fe75062123df61efde082a82943cc4e4567b0393cc1d3a43a17ac7cacfe57209343165ddbb34f563a0dfe2db97d76e05d6f3bc16e16d23fd90fdfc90880a225c55627936d7c5113f532efaad0e94eb7e53a09472a784cc64e60f173ae71302df3dfe30be9fdd4202838676bcd348ace945c66efc1b6e3cd918503da8493fb95da65c035180cf84c9335cc88d52f29fb3826eb6af154e2a69eea88eebcda8a2fccf4b25fd09bf8a2dce22ceb4e36c87279dd8ad7f0cabad110544fd00650680c81614ba0f14673d2a4ec3c3572a8e2dfd2d9229e18ce2d2ee3afc9f63216c89aa8361f1ad65183f59654f902c4dcfe8a56a4c74cc1486e1f83493b7b9d3b3e94063a696e2e1f12680d402a4fe8645387234048e40992be14430eea54847fab3296ff78157f78b79faa0c4532826c7c5b7baf8cdbcfe95005805eef92eebc6152551af89a4097fa1acf658490a3bab9ef0b51d4d5adf8abf3c43a2f11de89deeabed52a228a3953c63efca68a958c8997bdf5c2d30da5e6afc7e0679a67b1a08b999ba48f4b6703ccacaa95622f8ee972828cdbc1d899e983e98670e9079ebfb7481769e9e6a9bb3a854bd134545110d74fdd8cee8b5223de96a8ebbe4d3e5aaf689ce009e043e53000dcafb7fe244a1062f7c4fea7e0f3ffc6deb51fe7d94cf98fa6bedfd953f26e5586808c86e0bf70f594f77c3c405a6b176bb4da0a5b683af1babfc6f8143185e4156b8c6886b33466ad46f0797dc474e0d3be19cc9106d876c28df0a6d58668038af2ce2f04bf47776c379802451f5125cbe9f1216a615142138229cacf0b54503837f2cce019ed473b288f20495313429663c9731ee5c9d65cb4e613a317a8d446e35854abd723516f0e67e45ede8eddeb795389ecac1ddad4529e865cfb21bdc50e2118dd92fdfbd45d13a61ea7dcdc8b749de2d1b3aec9a91f483e29addeb5d93040d35656a5f1525e9462336f0a9b77be80a6847e03b632e976ec60734c16fd14b8f2d70dee0bcf8ba1bfc41077b504b6344afab92475222ddc0a9f2d873493678a4e11d4851f7b11b034bbf99058de753c66100f8c65a8f3c71834e2364e43560210d2cde2177b91af91b2e642da33e571ddd0933496b24e3836ec4f69601c0830c1af70d8b29860a6bed4046a17cc8124e4f79e677e97860ee9863ab5a51ecdadcd20f4b7f50960437239ef8f9e8cb4d52e0b741f27b0aa56af32b261536de54b2dc6a509091e40bd79d1b75ab7be9b67d8ffdd6e23c9848ee09bfd889b221dfbbf054827cd67af2288d7617b7fad57fcdd7930e818f36f9daaa0397742611b17579cc1beff9d7fcd40e91c7119e5ea0ecab140147a1c75e9ceb5f9ae064102540c301b3cf87806f71bd20f3a2c7d987b6a9263a689b05fd709c291bc214a66e6c2336c3cb050e40575f423160da47d6e280ec91d9c8865f759f0f67fdc2a13c98d77e75e6af1977f1a3c1279df3901a4416a82367ff78472f277e3e71f8aeae49527e0f52c5bb0f5182aeb1647163cf00a0ea8007f70783af9b04259f197580705a46894fc7614c24e44f152205af9d708355ae571b5d05958a3bed3a40a181c5ce240dbcc6ea023d374a792341286b2dc339f1ccb970ee793ff3abbe5a98ccb6b974755da5a6186d3ffed235384143e6620568a3b50907af2932cb2b4b7a024ddf666772440838fe7feb47b0da52a8e353d65971bb38492715792f0b7fc3d3eb9a2d5918389835947ac44d79980948b40b84df6104a178c5317f3cd003b9fb059fc905f7be6c405f6b19f6d4795e849b876e136e6d099232e22d3d9ef3ee550c57fb4bb70fb1dc72ac9fa91f69aaab94e0c7a9d91546883df8d882976f3f2f47b4f598e060a99443603ee98ebd6be35de4f4b56185937bb9446b220a9aea18a02df93c87c9020acf5f3419a3866d4bf181431cd3cef3d2df6317b4095775c0aaad61872610364620c3ee69906897bf5ecf017d68e1ba7d71023dd08af3d4348614d0c51b42b3ecdbb976a518766ce70c20affc5ec60684b0d0eb593422132e15f5bd84c949b9402b3e122ca3e698ccf3051158e28ce9632c2996008e9f3f05755db466fb65b70fd6429b249af5364153e9710f85b081863f54435dffab67b549088df1b5dc06d9f64b592737b57377c2a89e4a952ea846ea52f28e1ce62ad40e57935e1d3659ed90d4b93ecbeda4caf0105932fd7e6e4eb7d247701d2f8eeb7e969487216974b8356efc8b5a70f6e5c87dff5e23e65e2a206c7bf0fe352bc81694b8cfca7fd5eadafb75cbfc5271dc999cbfc3051e188799cec721dc54b2f6236ff739bbfd36f586909aa5a79961b9e752c0d976ae67557d9ef260524f16d111ccde543313f10c001fc3a251eeb2e4d570a4e8bc12c66387efef15be9e06ed3152b9efb3b0123b68ffe60d6ed3bf93b17b9404a0165f4eca672b4c6d45786e8b1702de2fdc9f26aa6692b941a6fa5cd8bf4f71207c54304fd9ee497f33b1ecfad86ecea53bc8feb63e26889640ef5e275e7131b6bee3a5f339068472a1b7c1472910109e9d6796b6d59ab3686f9f1e37d4b11509557f80f319f3b4be9fc180651d79616b85b3f2b98c1fc108167842f70376059bd2e249f9a4abdc8f046c0c858173e71c9036ad853a63507a5cc9c74f74a8172cd40208dd082914cfeaa77e3484d866d2b6ea8b342977d69b870047d6eb09d05f027574fe5f232204d6b8b97edcebb13a2032aac5bc78811dbe2274c616823fe9d69faa506b31ce4d4bf75302cead2ca1ce2d95b2bc09829c1be9f86e846f9dbeb792e1ae70a3ef54e4a45a4122f2ca24d66c7012b8c0cbb50504c72d8c846bbfda4a0028e8472dad25eb8071a9745ac3e4592fe9b67f06cfec2ace1daad4bd94abb089cfa1976aaab96f0543d4d33a8b6fff1ed40555ba6b1b7eaac6688202ad780093c04cd629429775046bec4bbc7ac06545c39e4e9ea9f4d12579d61d0f11ed0bf3570cda1f6c6fdbb15b85052be192acd88552dbd382028c2ea513dc0915b4d7110087b880469520c81ee2c2c55d76b1a2ed8646f4f264b5a79e8dc7d5e53105925d7ba985062a727eee7b723b49d3caaae3faea8d92fbcc71277e3b1fa78"}}}, 0x1012)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2400}]}, 0x24}}, 0x20000801)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), r1)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="350dabec9760"}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24040091)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010000}, 0x24004080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x64, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2e}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x64}}, 0x4000000)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4801)
socket(0x2, 0x1, 0x0)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x30)
r5 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x800)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4040)
r6 = socket(0x2, 0x5, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r6)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x5c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
03:29:49 executing program 2:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x28}}, 0x400)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}]}, 0x58}}, 0x20000000)
r2 = socket(0xa, 0x805, 0x6)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x41)
r3 = socket(0x2c, 0x4, 0x3)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4048864)
syz_genetlink_get_family_id$smc(&(0x7f0000000500), r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x904020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4c010)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008041)
r6 = socket$netlink(0x10, 0x3, 0xc)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r5)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000)
connect$netlink(r3, &(0x7f0000000880)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20080001}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="4b36c4531643"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x2008014}, 0x4004004)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040041)
[ 81.001946] audit: type=1400 audit(1737430189.765:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:29:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x87d48c20916d5fe2}, 0x4804)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71bb9cd6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a90}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b1c361323220"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004007)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gretap0\x00', <r5=>0x0, 0x7, 0x1, 0x8417, 0x9, {{0x15, 0x4, 0x2, 0x2d, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0x36, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xf, [{@remote, 0xf6b}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00}]}, @end]}}}}})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8100000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040d4}, 0x4000000)
03:29:49 executing program 4:
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000071)
read$hidraw(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001140)={'\x00', 0x1, 0x2d7, 0x8c8, 0xfffffffffffffffd, 0x6, 0xffffffffffffffff})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x5)
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, &(0x7f00000011c0))
write$hidraw(0xffffffffffffffff, &(0x7f0000001200)="21861c6c61c91071347d0db74fa45d2ec9b659de064668415aeb36c9ed05f273a0ccc19cbfe12cea3ec3c87d00eec941bba1d352c9f3f101146c7ca92eb5e2c02bdc6ac7109a1665356b7c35ef9bb46268598c0812dddc9f62872e24b9999d10a314925c7007427cb84900531d77d1ab8aa9448b8e94bcee5bae63fb34bf368bbdaadd40a9c1acffc003f0d8c2841c98d48c8687e4a696c5954228000cf91dc749b52a5d98e0d433dfb3425efadb202dbab6f59a8245764aaf6f9e7bc122f86e6e58d73edd82a2e11c", 0xc9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000001400)={&(0x7f0000001300), 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x30, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0xc840)
r3 = socket(0xa, 0x4, 0x8)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000001440)=0x9, 0x4)
timerfd_gettime(r0, &(0x7f0000001480))
r4 = socket$netlink(0x10, 0x3, 0x1)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001500), r1)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x44, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x180}, 0x404c090)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001680), r3)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x54, r6, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd4c4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd070}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000004}, 0x8c0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x48, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x9}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8}]}, 0x48}}, 0x2048000)
03:29:49 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xf0, &(0x7f0000000040)=0x1)
r1 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x9, 0x4)
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x2)
getsockname$netlink(r1, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r3 = socket(0x28, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x5c}}, 0x800)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc000010}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x64}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x882)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r5, 0x401, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x8001)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000008c0)={0x7, 0x4, 0x3, 0x2420000}, 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r7, &(0x7f0000000940), 0x2, 0x0)
03:29:49 executing program 6:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0xff)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000001c0)=0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20440300}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1b46, 0x1}}}}, [@NL80211_ATTR_SSID={0x21, 0x34, @random="f94da43cb711aba9868c7130e932e5e62a6aafad08a245b8ba738f0734"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d041d6c3e6cd2a1a02cf613fac8c8eec"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8095)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x75b251c0a3323746)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000005c0)={0x9, 0x6}, 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x98000, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000640)=0x8)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x602100, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x14)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20040011)
r7 = socket(0x6, 0x1, 0x7ff)
sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044051}, 0x15)
03:29:50 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x3, 0xccf8, 0x1, 'queue0\x00', 0x5})
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000100))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}]}, 0x50}}, 0x15)
r2 = timerfd_create(0x8, 0x80800)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
keyctl$clear(0x7, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x860}, 0x4000000)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5a30eb82}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x85}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffc0}]}, 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x4000804)
clock_gettime(0x0, &(0x7f0000000800)={<r6=>0x0, <r7=>0x0})
timerfd_settime(r2, 0x0, &(0x7f0000000840)={{}, {r6, r7+60000000}}, &(0x7f0000000880))
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x110, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6c}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000041}, 0x40001)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
[ 82.577856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.583062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.585318] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.602081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.607389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 82.609467] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 82.764166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 82.774190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 82.778045] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 82.780141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 82.781000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 82.785630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 82.786445] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 82.788397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 82.792158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 82.793597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 82.797141] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 82.798257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 82.799448] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 82.804193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 82.812208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 82.816018] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 82.817164] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 82.824231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 82.830330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 82.833734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 82.838051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 82.846390] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 82.854147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 82.858011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 82.865515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 82.867394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 82.868724] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 82.872017] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 82.885971] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 82.887462] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 82.909607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 82.915282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 82.928521] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 82.937011] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 82.948276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 82.950288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 82.965781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 82.980277] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 82.983159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 82.993178] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 83.008742] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 83.027491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 84.661422] Bluetooth: hci0: command tx timeout
[ 84.917155] Bluetooth: hci2: command tx timeout
[ 84.918151] Bluetooth: hci1: command tx timeout
[ 84.980903] Bluetooth: hci6: command tx timeout
[ 84.981172] Bluetooth: hci4: command tx timeout
[ 84.981300] Bluetooth: hci5: command tx timeout
[ 84.981425] Bluetooth: hci3: command tx timeout
[ 85.109002] Bluetooth: hci7: command tx timeout
[ 86.707895] Bluetooth: hci0: command tx timeout
[ 86.963974] Bluetooth: hci2: command tx timeout
[ 86.964069] Bluetooth: hci1: command tx timeout
[ 87.028973] Bluetooth: hci3: command tx timeout
[ 87.029059] Bluetooth: hci5: command tx timeout
[ 87.029110] Bluetooth: hci4: command tx timeout
[ 87.029158] Bluetooth: hci6: command tx timeout
[ 87.156980] Bluetooth: hci7: command tx timeout
[ 88.755908] Bluetooth: hci0: command tx timeout
[ 89.012125] Bluetooth: hci1: command tx timeout
[ 89.013176] Bluetooth: hci2: command tx timeout
[ 89.076938] Bluetooth: hci6: command tx timeout
[ 89.077349] Bluetooth: hci4: command tx timeout
[ 89.077430] Bluetooth: hci5: command tx timeout
[ 89.077492] Bluetooth: hci3: command tx timeout
[ 89.205848] Bluetooth: hci7: command tx timeout
[ 90.804087] Bluetooth: hci0: command tx timeout
[ 91.060930] Bluetooth: hci2: command tx timeout
[ 91.061025] Bluetooth: hci1: command tx timeout
[ 91.125110] Bluetooth: hci3: command tx timeout
[ 91.125238] Bluetooth: hci5: command tx timeout
[ 91.125289] Bluetooth: hci4: command tx timeout
[ 91.125337] Bluetooth: hci6: command tx timeout
[ 91.251949] Bluetooth: hci7: command tx timeout
[ 139.495729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 139.496240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 139.722395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 139.722473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 140.461898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 140.462347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 140.718417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 140.718501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 140.943866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 140.943956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 141.105874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3862 comm=syz-executor.3
[ 141.134661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.134740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 141.374574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.374656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:30:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x87d48c20916d5fe2}, 0x4804)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71bb9cd6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a90}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b1c361323220"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004007)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gretap0\x00', <r5=>0x0, 0x7, 0x1, 0x8417, 0x9, {{0x15, 0x4, 0x2, 0x2d, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0x36, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xf, [{@remote, 0xf6b}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00}]}, @end]}}}}})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8100000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040d4}, 0x4000000)
[ 141.998906]
[ 141.999158] ======================================================
[ 141.999751] WARNING: possible circular locking dependency detected
[ 142.000367] 6.13.0-rc7-next-20250120 #1 Not tainted
[ 142.000852] ------------------------------------------------------
[ 142.002364] kworker/u8:0/11 is trying to acquire lock:
[ 142.003818] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[ 142.006712]
[ 142.006712] but task is already holding lock:
[ 142.007952] ffff888033868768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 142.010034]
[ 142.010034] which lock already depends on the new lock.
[ 142.010034]
[ 142.010790]
[ 142.010790] the existing dependency chain (in reverse order) is:
[ 142.011484]
[ 142.011484] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[ 142.012153] __mutex_lock+0x13d/0xb50
[ 142.012630] wiphy_register+0x1b2e/0x25d0
[ 142.013124] ieee80211_register_hw+0x23a4/0x3d60
[ 142.013660] mac80211_hwsim_new_radio+0x2759/0x4d60
[ 142.014225] init_mac80211_hwsim+0x389/0x870
[ 142.014744] do_one_initcall+0xf9/0x640
[ 142.015227] kernel_init_freeable+0x53d/0x7a0
[ 142.015750] kernel_init+0x1e/0x2d0
[ 142.016189] ret_from_fork+0x48/0x80
[ 142.016617] ret_from_fork_asm+0x1a/0x30
[ 142.017103]
[ 142.017103] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[ 142.017712] __lock_acquire+0x29fd/0x4580
[ 142.018187] lock_acquire+0x19b/0x520
[ 142.018629] __mutex_lock+0x13d/0xb50
[ 142.019080] unregister_netdevice_many_notify+0x1612/0x1c80
[ 142.019688] unregister_netdevice_queue+0x224/0x2e0
[ 142.020239] _cfg80211_unregister_wdev+0x57b/0x700
[ 142.020790] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 142.021347] ieee80211_unregister_hw+0x55/0x3a0
[ 142.021870] hwsim_exit_net+0x3a0/0x730
[ 142.022334] ops_exit_list+0xb3/0x180
[ 142.022784] cleanup_net+0x546/0xad0
[ 142.023225] process_one_work+0x8ee/0x1a10
[ 142.023727] worker_thread+0x674/0xe70
[ 142.024208] kthread+0x3ab/0x720
[ 142.024630] ret_from_fork+0x48/0x80
[ 142.025064] ret_from_fork_asm+0x1a/0x30
[ 142.025547]
[ 142.025547] other info that might help us debug this:
[ 142.025547]
[ 142.026288] Possible unsafe locking scenario:
[ 142.026288]
[ 142.026852] CPU0 CPU1
[ 142.027303] ---- ----
[ 142.027741] lock(&rdev->wiphy.mtx);
[ 142.028143] lock(rtnl_mutex);
[ 142.028708] lock(&rdev->wiphy.mtx);
[ 142.029320] lock(rtnl_mutex);
[ 142.029671]
[ 142.029671] *** DEADLOCK ***
[ 142.029671]
[ 142.030234] 4 locks held by kworker/u8:0/11:
[ 142.030667] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[ 142.031663] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[ 142.032639] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[ 142.033536] #3: ffff888033868768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 142.034539]
[ 142.034539] stack backtrace:
[ 142.034969] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250120 #1
[ 142.035753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 142.036519] Workqueue: netns cleanup_net
[ 142.036934] Call Trace:
[ 142.037184] <TASK>
[ 142.037405] dump_stack_lvl+0xca/0x120
[ 142.037815] print_circular_bug+0x47b/0x750
[ 142.038249] check_noncircular+0x2e9/0x3c0
[ 142.038675] ? __pfx_check_noncircular+0x10/0x10
[ 142.039144] ? srso_return_thunk+0x5/0x5f
[ 142.039578] ? find_held_lock+0x2c/0x110
[ 142.040015] ? lockdep_lock+0xba/0x1b0
[ 142.040425] ? __pfx_lockdep_lock+0x10/0x10
[ 142.040874] __lock_acquire+0x29fd/0x4580
[ 142.041301] ? __pfx___lock_acquire+0x10/0x10
[ 142.041750] ? __pfx_try_to_wake_up+0x10/0x10
[ 142.042204] lock_acquire+0x19b/0x520
[ 142.042592] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 142.043166] ? __pfx_lock_acquire+0x10/0x10
[ 142.043599] ? srso_return_thunk+0x5/0x5f
[ 142.044033] ? lock_release+0x20f/0x6f0
[ 142.044443] ? srso_return_thunk+0x5/0x5f
[ 142.044880] ? lock_is_held_type+0x9e/0x120
[ 142.045328] ? srso_return_thunk+0x5/0x5f
[ 142.045772] __mutex_lock+0x13d/0xb50
[ 142.046175] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 142.046766] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 142.047350] ? srso_return_thunk+0x5/0x5f
[ 142.047786] ? synchronize_rcu_expedited+0x38a/0x420
[ 142.048306] ? __pfx___mutex_lock+0x10/0x10
[ 142.048757] ? __pfx_autoremove_wake_function+0x10/0x10
[ 142.049295] ? srso_return_thunk+0x5/0x5f
[ 142.049738] ? kasan_quarantine_put+0x84/0x1e0
[ 142.050215] ? __pfx_wait_rcu_exp_gp+0x10/0x10
[ 142.050686] ? srso_return_thunk+0x5/0x5f
[ 142.051131] unregister_netdevice_many_notify+0x1612/0x1c80
[ 142.051705] ? __virt_addr_valid+0x2e8/0x5d0
[ 142.052167] ? __pfx_lock_release+0x10/0x10
[ 142.052611] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 142.053212] ? find_held_lock+0x2c/0x110
[ 142.053654] ? srso_return_thunk+0x5/0x5f
[ 142.054095] ? kernfs_remove_by_name_ns+0xc7/0x130
[ 142.054618] ? srso_return_thunk+0x5/0x5f
[ 142.055063] ? lock_release+0x20f/0x6f0
[ 142.055477] ? __pfx_lock_release+0x10/0x10
[ 142.055917] ? srso_return_thunk+0x5/0x5f
[ 142.056365] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 142.056904] ? srso_return_thunk+0x5/0x5f
[ 142.057346] unregister_netdevice_queue+0x224/0x2e0
[ 142.057852] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 142.058401] ? up_write+0x195/0x520
[ 142.058797] _cfg80211_unregister_wdev+0x57b/0x700
[ 142.059306] ? srso_return_thunk+0x5/0x5f
[ 142.059756] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 142.060276] ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[ 142.060825] ? srso_return_thunk+0x5/0x5f
[ 142.061258] ? srso_return_thunk+0x5/0x5f
[ 142.061695] ? synchronize_rcu+0x1ff/0x260
[ 142.062129] ieee80211_unregister_hw+0x55/0x3a0
[ 142.062614] hwsim_exit_net+0x3a0/0x730
[ 142.063029] ? __pfx_hwsim_exit_net+0x10/0x10
[ 142.063485] ? srso_return_thunk+0x5/0x5f
[ 142.063927] ? netdev_run_todo+0x788/0x1040
[ 142.064374] ? srso_return_thunk+0x5/0x5f
[ 142.064819] ? __pfx_hwsim_exit_net+0x10/0x10
[ 142.065277] ops_exit_list+0xb3/0x180
[ 142.065676] cleanup_net+0x546/0xad0
[ 142.066081] ? __pfx_cleanup_net+0x10/0x10
[ 142.066529] process_one_work+0x8ee/0x1a10
[ 142.066990] ? __pfx_lock_acquire+0x10/0x10
[ 142.067439] ? __pfx_process_one_work+0x10/0x10
[ 142.067929] ? srso_return_thunk+0x5/0x5f
[ 142.068375] ? move_linked_works+0x172/0x270
[ 142.068818] ? srso_return_thunk+0x5/0x5f
[ 142.069248] ? assign_work+0x196/0x240
[ 142.069659] worker_thread+0x674/0xe70
[ 142.070067] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 142.070585] ? __pfx_worker_thread+0x10/0x10
[ 142.071040] kthread+0x3ab/0x720
[ 142.071398] ? __pfx_kthread+0x10/0x10
[ 142.071806] ? srso_return_thunk+0x5/0x5f
[ 142.072241] ? finish_task_switch.isra.0+0x206/0x840
[ 142.072747] ? __pfx_kthread+0x10/0x10
[ 142.073163] ret_from_fork+0x48/0x80
[ 142.073541] ? __pfx_kthread+0x10/0x10
[ 142.073953] ret_from_fork_asm+0x1a/0x30
[ 142.074392] </TASK>
[ 142.235581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3882 comm=syz-executor.3
03:30:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x87d48c20916d5fe2}, 0x4804)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71bb9cd6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a90}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b1c361323220"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004007)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gretap0\x00', <r5=>0x0, 0x7, 0x1, 0x8417, 0x9, {{0x15, 0x4, 0x2, 0x2d, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0x36, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xf, [{@remote, 0xf6b}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00}]}, @end]}}}}})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8100000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040d4}, 0x4000000)
[ 142.470472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3888 comm=syz-executor.3
03:30:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x87d48c20916d5fe2}, 0x4804)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71bb9cd6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a90}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b1c361323220"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004007)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gretap0\x00', <r5=>0x0, 0x7, 0x1, 0x8417, 0x9, {{0x15, 0x4, 0x2, 0x2d, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0x36, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xf, [{@remote, 0xf6b}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00}]}, @end]}}}}})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8100000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040d4}, 0x4000000)
[ 142.684662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3894 comm=syz-executor.3
03:30:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x87d48c20916d5fe2}, 0x4804)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71bb9cd6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a90}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b1c361323220"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004007)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gretap0\x00', <r5=>0x0, 0x7, 0x1, 0x8417, 0x9, {{0x15, 0x4, 0x2, 0x2d, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0x36, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xf, [{@remote, 0xf6b}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00}]}, @end]}}}}})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8100000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c000)
socket$nl_generic(0x10, 0x3, 0x10)
[ 142.907230] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3900 comm=syz-executor.3
03:30:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x87d48c20916d5fe2}, 0x4804)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71bb9cd6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a90}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b1c361323220"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004007)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x1, 0x8417, 0x9, {{0x15, 0x4, 0x2, 0x2d, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0x36, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xf, [{@remote, 0xf6b}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00}]}, @end]}}}}})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r5 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
socket$nl_generic(0x10, 0x3, 0x10)
[ 143.064145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3907 comm=syz-executor.3
03:30:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x87d48c20916d5fe2}, 0x4804)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71bb9cd6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a90}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b1c361323220"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004007)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x1, 0x8417, 0x9, {{0x15, 0x4, 0x2, 0x2d, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0x36, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xf, [{@remote, 0xf6b}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00}]}, @end]}}}}})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
03:30:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x87d48c20916d5fe2}, 0x4804)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71bb9cd6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a90}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b1c361323220"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004007)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x1, 0x8417, 0x9, {{0x15, 0x4, 0x2, 0x2d, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0x36, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xf, [{@remote, 0xf6b}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00}]}, @end]}}}}})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
03:30:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x87d48c20916d5fe2}, 0x4804)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x71bb9cd6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbd99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a90}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b1c361323220"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004007)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x1, 0x8417, 0x9, {{0x15, 0x4, 0x2, 0x2d, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0x36, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xf, [{@remote, 0xf6b}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00}]}, @end]}}}}})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
[ 144.187843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 144.190823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 144.192527] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 144.195633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 144.197438] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 144.201068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 144.440300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 144.445359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 144.445411] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 144.447727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 144.450920] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 144.452485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 144.452640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 144.454476] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 144.455532] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 144.456965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 144.457178] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 144.458922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 144.459077] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 144.469323] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 144.473649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 144.473957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 144.475701] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 144.477367] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 144.516272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 144.519538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 144.520361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 144.526969] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 144.538862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 144.539066] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 144.553103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 144.554144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 144.558981] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 144.561002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 144.561199] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 144.562671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 144.631915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 144.636279] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 144.649227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 144.663075] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 144.682229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 144.691000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 146.228085] Bluetooth: hci0: command tx timeout
[ 146.484355] Bluetooth: hci1: command tx timeout
[ 146.548024] Bluetooth: hci3: command tx timeout
[ 146.548053] Bluetooth: hci2: command tx timeout
[ 146.612050] Bluetooth: hci5: command tx timeout
[ 146.612330] Bluetooth: hci4: command tx timeout
[ 146.741077] Bluetooth: hci7: command tx timeout
[ 148.275944] Bluetooth: hci0: command tx timeout
[ 148.531930] Bluetooth: hci1: command tx timeout
[ 148.596523] Bluetooth: hci2: command tx timeout
[ 148.596551] Bluetooth: hci3: command tx timeout
[ 148.662089] Bluetooth: hci5: command tx timeout
[ 148.662210] Bluetooth: hci4: command tx timeout
[ 148.788813] Bluetooth: hci7: command tx timeout
[ 150.323837] Bluetooth: hci0: command tx timeout
[ 150.581834] Bluetooth: hci1: command tx timeout
[ 150.644821] Bluetooth: hci2: command tx timeout
[ 150.645353] Bluetooth: hci3: command tx timeout
[ 150.709839] Bluetooth: hci4: command tx timeout
[ 150.709882] Bluetooth: hci5: command tx timeout
[ 150.835964] Bluetooth: hci7: command tx timeout
VM DIAGNOSIS:
03:30:50 Registers:
info registers vcpu 0
RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283e2e5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095deb28
R8 =0000000000000001 R9 =ffffed10012bbd55 R10=0000000000000063 R11=6666666666666666
R12=0000000000000063 R13=0000000000000001 R14=ffff888008fea051 R15=ffff8880095dee28
RIP=ffffffff8283e33d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f31686f1543 CR3=0000000013132000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ffff00000000000000000000ffff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff88800952f2c0 RCX=0000000000000001 RDX=1ffff110012a5e58
RSI=ffffffff81b93065 RDI=ffff88800952f2cc RBP=0000000000000005 RSP=ffff88800952f1d8
R8 =0000000000000001 R9 =ffff88800952f238 R10=000000000003ab6c R11=0000000000027e71
R12=ffff88800952f2c0 R13=0000000000000000 R14=ffff888009520000 R15=ffff88801985a690
RIP=ffffffff815ec4df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f39b4155900 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005609d9e46dd8 CR3=000000000c588000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff000000ff00
XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369
XMM04=00005609d9ed7ef000005609d9ecdaf0 XMM05=0100ffff02010002ffffffff00000008
XMM06=00007f39b49f006563697665642e3269 XMM07=00000000000000000000000000000000
XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000